Skip to content

chore(envoy-gateway): bump envoy gateway to 1.8.2#711

Merged
mberlofa merged 2 commits into
mainfrom
chore/envoy-gateway-1.8.2
Jul 7, 2026
Merged

chore(envoy-gateway): bump envoy gateway to 1.8.2#711
mberlofa merged 2 commits into
mainfrom
chore/envoy-gateway-1.8.2

Conversation

@mberlofa

@mberlofa mberlofa commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Closes #692.

Summary

  • Bump Envoy Gateway from v1.8.1 to v1.8.2.
  • Update controller, certgen, and shutdown-manager gateway image defaults to docker.io/envoyproxy/gateway:v1.8.2.
  • Update values schema, README upgrade notes, certificates docs, and image assertion tests.

Upstream Evidence

  • Official release announcement: https://gateway.envoyproxy.io/news/releases/notes/v1.8.2
  • GitHub release: https://github.com/envoyproxy/gateway/releases/tag/v1.8.2
  • Docker manifest verified: docker.io/envoyproxy/gateway:v1.8.2
  • Manifest platforms: linux/amd64, linux/arm64.
  • docker.io/envoyproxy/gateway:1.8.2 was checked and does not exist; the canonical upstream image tag keeps the v prefix.
  • Upstream v1.8.2 tightens SecurityPolicy.spec.apiKeyAuth.extractFrom admission validation. The chart does not render SecurityPolicy resources by default, and the upgrade note documents the validation change for users with existing custom policies.

Site Sync

Validation

  • make image-verify IMAGE=docker.io/envoyproxy/gateway:v1.8.2
  • make image-verify IMAGE=docker.io/envoyproxy/gateway:1.8.2 failed as expected because the non-prefixed tag is not published.
  • make deps-check CHART=envoy-gateway
  • helm unittest charts/envoy-gateway passed: 16 suites, 120 tests.
  • make validate-chart CHART=envoy-gateway passed fully: 20 layers, including k3d behavioral validation for default and all CI values scenarios.
  • make standards-check CHART=envoy-gateway
  • node scripts/charts/template-standards-check.js --chart envoy-gateway
  • make site-sync-check CHART=envoy-gateway
  • make release-check REPO=charts
  • make attribution-check REPO=charts

Summary by CodeRabbit

  • Maintenance
    • Bumped the Helm chart appVersion and default component image tags to v1.8.2 (controller, certgen, shutdown-manager).
  • Documentation
    • Updated quick-start prerequisites, image tag references, parameters tables, and upgrade notes to v1.8.2.
  • Tests
    • Updated certgen and envoyproxy configuration tests to expect v1.8.2 image tags.

@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Standards Check (GR-079) — PASS

Every changed chart fully passes standards-check.

@github-actions

github-actions Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

🟢 Security Scan: envoy-gateway

Framework Score
MITRE + NSA + SOC2 71.63059%

✅ Security posture acceptable.

@coderabbitai

coderabbitai Bot commented Jul 7, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 9eb4587a-39c8-4eb5-a7a5-f6eaf7c39c59

📥 Commits

Reviewing files that changed from the base of the PR and between 9f00499 and b757429.

📒 Files selected for processing (1)
  • charts/envoy-gateway/README.md
✅ Files skipped from review due to trivial changes (1)
  • charts/envoy-gateway/README.md

📝 Walkthrough

Walkthrough

This PR bumps the envoy-gateway Helm chart from v1.8.1 to v1.8.2, updating chart metadata, default image tags, related documentation, and unit test expectations.

Changes

Envoy Gateway version bump

Layer / File(s) Summary
Chart metadata and default image tags
charts/envoy-gateway/Chart.yaml, charts/envoy-gateway/values.yaml, charts/envoy-gateway/values.schema.json
appVersion and default image tags for controller, certgen, and shutdown-manager sidecar were updated to v1.8.2.
Documentation and README version references
charts/envoy-gateway/README.md, charts/envoy-gateway/docs/certificates.md
README version references, Helm value tables, upgrade notes, and certgen documentation were updated to v1.8.2.
Test expectation updates
charts/envoy-gateway/tests/certgen_test.yaml, charts/envoy-gateway/tests/envoyproxy_config_test.yaml
Certgen and EnvoyProxy config tests were updated to expect v1.8.2 image tags.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Related issues: #692

Suggested labels: chore, dependencies, envoy-gateway

Suggested reviewers: helm-chart-maintainers

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely states the main change: bumping Envoy Gateway to 1.8.2.
Linked Issues check ✅ Passed The PR updates the chart version, default image tags, tests, and docs to Envoy Gateway v1.8.2 as requested.
Out of Scope Changes check ✅ Passed The changes stay within the version bump and related documentation/test updates, with no obvious unrelated additions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/envoy-gateway-1.8.2

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@charts/envoy-gateway/README.md`:
- Around line 448-462: The release note in the Envoy Gateway README implies the
chart changes the managed Envoy proxy image, but the chart defaults in values
remain pinned to the same proxy tag. Update the wording in the v1.8.2 notes to
present this as a compatibility-matrix reference for proxy.image.tag rather than
a chart image change, or remove that sentence from the delta entirely. Use the
README section mentioning docker.io/envoyproxy/gateway:v1.8.2 and
docker.io/envoyproxy/envoy:distroless-v1.38.0 to adjust the phrasing.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4a485965-d55d-4069-9a51-95fadd80f377

📥 Commits

Reviewing files that changed from the base of the PR and between 66a35d5 and 9f00499.

📒 Files selected for processing (7)
  • charts/envoy-gateway/Chart.yaml
  • charts/envoy-gateway/README.md
  • charts/envoy-gateway/docs/certificates.md
  • charts/envoy-gateway/tests/certgen_test.yaml
  • charts/envoy-gateway/tests/envoyproxy_config_test.yaml
  • charts/envoy-gateway/values.schema.json
  • charts/envoy-gateway/values.yaml

Comment thread charts/envoy-gateway/README.md
@mberlofa mberlofa merged commit 933a746 into main Jul 7, 2026
17 checks passed
@mberlofa mberlofa deleted the chore/envoy-gateway-1.8.2 branch July 7, 2026 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore(envoy-gateway): upstream image update available (v1.8.1 → 1.8.2)

1 participant